CVE-2004-2071: Macallan Mail Solution

High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days.

Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentication in the web interface via an HTTP GET request with two slashes ("//") after the server name.

Affected products

• Macallan Mail Solution: version 2.8.4.6_build_260 only

Published 2004-12-31. Last modified 2026-06-16.